{"vulnerability": "CVE-2014-1812", "sightings": [{"uuid": "91265596-e412-4f52-9b6f-6708d678311b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "MISP/b426aa9c-dc22-4a91-8213-f8d513405423", "content": "", "creation_timestamp": "2020-12-09T07:18:56.000000Z"}, {"uuid": "cadcff04-c678-4a55-a373-a578a2ae3d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422", "content": "", "creation_timestamp": "2021-11-08T08:58:19.000000Z"}, {"uuid": "9e7fdc25-6bff-49b2-b17d-7760162b10dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2021-11-20T09:53:52.000000Z"}, {"uuid": "673567ad-d615-4ea9-a84f-79b94981aa58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "MISP/228b9ebc-e89d-4439-9ea9-f11c32275bc7", "content": "", "creation_timestamp": "2024-11-14T06:09:02.000000Z"}, {"uuid": "c98d7d08-9185-4c87-8748-130c0dfe3386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971048", "content": "", "creation_timestamp": "2024-12-24T20:23:31.924276Z"}, {"uuid": "26ac7c5c-0e72-4a9b-9039-d3f86ad1ac14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "f31c63bc-4f66-429b-bdc1-720372554ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:37.000000Z"}, {"uuid": "d04f50a6-b724-4c00-91e2-a8f303196bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:26.000000Z"}, {"uuid": "7b09e601-5a19-4f04-be1f-a20e927e039a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/smb_enum_gpp.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "87554684-66d1-4af1-b12c-db4a24c042da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d41ef7ed-39b6-4408-a718-2c3bce5fc99e", "content": "", "creation_timestamp": "2025-03-03T08:51:11.190614Z"}, {"uuid": "5426331f-9872-4d7d-9c48-8ea815f3ee79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2014-1812", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/621fc5ec-46bc-44c3-9772-928169f89fb7", "content": "", "creation_timestamp": "2026-02-02T12:28:48.364225Z"}, {"uuid": "bbaa5c3e-597f-43ff-bfe1-738c652f9f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "exploited", "source": "Telegram/W-jYIeFXCkM9IwOnJsQQZgQbYWCSBua-wzUr--uR155UByh8", "content": "", "creation_timestamp": "2025-02-14T10:00:35.000000Z"}, {"uuid": "39ca9b42-b26a-4e4d-aca6-21c38b9ade2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-07-30T01:01:10.234832Z"}, {"uuid": "d118dad4-10de-4862-93b1-bb1aebc98555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-08-01T11:00:12.596797Z"}, {"uuid": "5ba1bafd-6f49-48c0-a676-fa3bc9ef0d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-08-02T00:01:03.576363Z"}, {"uuid": "b9381c95-b7d4-4686-a13f-830251d69168", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/25ae0628-bbd0-4c6a-b7e0-d9f24b3ad19c", "content": "", "creation_timestamp": "2026-06-19T12:47:48.363432Z"}, {"uuid": "1d1c12ed-c7b0-4e7e-9bd2-781d5a7a1042", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6be89b5a-f46e-4cf4-b752-77a6c046dcc9", "content": "", "creation_timestamp": "2026-06-23T14:04:40.498050Z"}, {"uuid": "55f00c58-c27d-40d0-b8aa-21aa24e77aef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ", "content": "", "creation_timestamp": "2026-07-29T12:01:16.902982Z"}, {"uuid": "fd284d80-30f0-42a1-87cf-e83812bfad86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-1812", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/smb/smb_enum_gpp.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Joshua D. Abraham \"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": false, \"default_credential\": false, \"description\": \"This module enumerates files from target domain controllers and connects to them via SMB.\\n        It then looks for Group Policy Preference XML files containing local/domain user accounts\\n        and passwords and decrypts them using Microsoft's public AES key. This module has been\\n        tested successfully on a Win2k8 R2 Domain Controller.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/smb/smb_enum_gpp\", \"is_install_path\": true, \"mod_time\": \"2025-06-20 13:20:44 +0000\", \"name\": \"SMB Group Policy Preference Saved Passwords Enumeration\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/smb/smb_enum_gpp.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/smb/smb_enum_gpp\", \"references\": [\"CVE-2014-1812\", \"MSB-MS14-025\", \"URL-https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gppref/d315342d-41c0-47e3-ab96-7039eb91f5b4\", \"URL-http://rewtdance.blogspot.com/2012/06/exploiting-windows-2008-group-policy.html\", \"URL-http://blogs.technet.com/grouppolicy/archive/2009/04/22/passwords-in-group-policy-preferences-updated.aspx\", \"URL-https://labs.portcullis.co.uk/blog/are-you-considering-using-microsoft-group-policy-preferences-think-again/\"], \"rport\": 445, \"session_types\": [\"smb\"], \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:05.086241Z"}]}